EUVD-2018-8328

Malware in sbrugna...

CVE-2018-16519

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting XSS via URLs used by "iFrame" widgets...

Malicious code in @coyo/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 986db3d3f9403677037ca5dfa1eb6cbe730fa4d3686adb30602be2c8f5747e6e The OpenSSF Package Analysis project identified '@coyo/ui' @ 2.2.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9298 Malicious code in @coyo/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 986db3d3f9403677037ca5dfa1eb6cbe730fa4d3686adb30602be2c8f5747e6e The OpenSSF Package Analysis project identified '@coyo/ui' @ 2.2.3 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview ngdraggable-coyo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

CVE-2018-16519

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting XSS via URLs used by "iFrame" widgets...

CVE-2018-16519

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting XSS via URLs used by "iFrame" widgets...

Cross site scripting

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting XSS via URLs used by "iFrame" widgets...

CVE-2018-16519

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting XSS via URLs used by "iFrame" widgets...

CVE-2018-16519

CVE-2018-16519 affects COYO: versions 9.0.8, 10.0.11 and 12.0.4. The root cause is missing URL validation in COYO’s handling of URLs used by iFrame widgets, enabling cross-site scripting (XSS). Documented impact is cross-site scripting within the web application; exploitation details are not prov...

COYO Cross-Site Scripting Vulnerability

COYO is a social intranet software. COYO suffers from a cross-site scripting vulnerability. The vulnerability is due to a lack of URL validation by the program and can be exploited by an attacker to execute javascript code in the user context using malicious use of missed access...

COYO 9.0.8 / 10.0.11 / 12.0.4 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2018-032 Product: COYO Manufacturer: COYO GmbH Affected Versions: 9.0.8, 10.0.11, 12.0.4 Tested Versions: 9.0.8, 10.0.11, 10.0.33, 12.0.4 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: High Solution Status: Fixed...